Security Engineer (AMK)

Combuilder Pte Ltd; Hong Kong; On-site; HKD 600,000 - 900,000; Full time

Job summary

Combuilder Pte Ltd is seeking an experienced Security Engineer with 6+ years in cybersecurity operations, incident response, and infrastructure protection. The role covers threat monitoring, vulnerability management, governance, and compliance across enterprise environments.

The engineer will manage Check Point Firewall and CloudGuard, secure VMware NSX, and support networking, virtualization, and security projects to ensure continuous service availability.

Qualifications

• Bachelor's Degree in Information Technology, Cybersecurity, Computer Science, or related discipline will be an advantage.
• Minimum 6 years of experience in Cybersecurity, Network Security, or Security Engineering.
• Hands-on experience with Check Point Firewall and CloudGuard solutions.
• Experience managing enterprise Cisco switching environments.
• Experience supporting Broadcom VMware NSX security and virtualization environments.

Responsibilities

• Monitor, investigate, and respond to cybersecurity incidents and security alerts.
• Conduct threat hunting, forensic analysis, and incident investigations.
• Analyze security logs and events to identify malicious activities and security risks.
• Support security assessments, remediation plans, and root cause analysis.
• Manage and administer Check Point Firewall environments and CloudGuard.
• Secure Broadcom VMware NSX environments and implement micro-segmentation.

Skills

Cybersecurity operations

Incident response

Threat monitoring

Vulnerability management

Security governance

Network security

Cloud security

VMware NSX security

VPN/IPS/IDS

IAM administration

Education

Bachelor's Degree in IT / Cybersecurity / CS

Tools

Check Point Firewall

Check Point CloudGuard

Broadcom VMware NSX

Cisco Switching

VPN technologies

Job description

An experienced Security Engineer with 6 years of expertise in cybersecurity operations, network security, firewall administration, cloud security, and infrastructure protection. Responsible for safeguarding enterprise environments through proactive threat monitoring, incident response, vulnerability management, and security governance. The role also provides infrastructure and systems support during periods of lower security operational demand to ensure operational continuity and service availability.

Key Responsibilities

Primary Responsibilities: Cybersecurity (70-80%)

Security Operations & Incident Response

• Monitor, investigate, and respond to cybersecurity incidents and security alerts.
• Conduct threat hunting, forensic analysis, and incident investigations.
• Analyze security logs and events to identify malicious activities and security risks.
• Support security assessments, remediation plans, and root cause analysis.

Network & Firewall Security

• Manage and administer Check Point Firewall environments, including policy creation, NAT configuration, IPS, VPN, application control, and threat prevention.
• Monitor firewall performance and optimize security policies in line with security standards.
• Support network segmentation and secure network architecture initiatives.

Cloud Security

• Implement and maintain security controls for cloud environments utilizing Check Point CloudGuard.
• Monitor cloud security posture and ensure compliance with organizational security requirements.
• Perform cloud risk assessments and vulnerability management.

Data Center & Virtualization Security

• Administer and secure Broadcom VMware NSX environments.
• Implement micro-segmentation policies and network security controls within virtualized infrastructure.
• Support network virtualization security architecture and troubleshooting activities.

Security Governance & Compliance

• Conduct vulnerability assessments and coordinate remediation activities.
• Support internal and external security audits.
• Develop and maintain security policies, standards, and procedures.
• Ensure compliance with cybersecurity frameworks and regulatory requirements.

Security Improvement & Automation

• Recommend and implement security enhancements.
• Participate in infrastructure and security projects.
• Support security awareness initiatives and technical security consultations.

Secondary Responsibilities: Infrastructure & Systems Support (20-30%)

Network Infrastructure Support

• Configure, maintain, and troubleshoot Cisco Switches and network infrastructure.
• Support LAN/WAN connectivity, VLAN configurations, routing, switching, and network performance optimization.
• Assist with network upgrades, migrations, and capacity planning.

Systems Administration

• Support Windows and Linux servers.
• Perform patch management, system monitoring, and maintenance activities.
• Support virtualization platforms and infrastructure services.

Operational Support

• Monitor system health and infrastructure availability.
• Support backup, recovery, and disaster recovery activities.
• Participate in scheduled maintenance and service improvement initiatives.

Required Technical Skills

Security Technologies

• Check Point Firewall Administration
• Check Point CloudGuard
• Security Incident Response
• Vulnerability Management
• Security Monitoring and Threat Detection
• Security Governance and Compliance
• VPN Technologies
• IPS/IDS Solutions
• Identity and Access Management (IAM)

Networking Technologies

• Cisco Switching Technologies
• TCP/IP, Routing, Switching
• VLAN Configuration
• Network Segmentation
• LAN/WAN Infrastructure

Virtualization & Cloud

• Broadcom VMware NSX
• VMware Infrastructure
• Micro-Segmentation
• Cloud Security Architecture
• Hybrid Cloud Security

Operating Systems

• Windows Server Administration
• Linux Server Administration

Requirements

• Bachelor's Degree in Information Technology, Cybersecurity, Computer Science, or related discipline will be added advantage.
• Minimum 6 years of experience in Cybersecurity, Network Security, or Security Engineering.
• Hands-on experience with Check Point Firewall and CloudGuard solutions.
• Experience managing enterprise Cisco switching environments.
• Experience supporting Broadcom VMware NSX security and virtualization environments.

Preferred Certifications

• Check Point Certified Security Administrator (CCSA)
• Check Point Certified Security Expert (CCSE)
• Cisco CCNA / CCNP
• VMware NSX Certification
• CISSP
• CISM
• CompTIA Security+